HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

507
DPD configuration, 221
global parameters configuration, 221
keyrin
g configuration, 224
limits on the numbe
r of IKEv2 SAs setting, 222
maintaining, 227
messag
e retransmission, 220
negotiatio
n failure troubleshooting (IPsec
tunnels cannot be set up), 240
negotiatio
n failure troubleshooting (no
proposal match), 240
new featu
re, 219
policy configu
ration, 223
pre
-shared key authentication, 227
profile config
uration, 225
prop
osal configuration, 223
proto
cols and standards, 220
SA
rekeying, 220
trouble
shooting, 240
impleme
nting
Hewlett Packard Enterprise 802.1X, 86
s
ecurity AAA for MPLS L3VPNs, 16
se
curity AAA HWTACACS, 11
se
curity AAA RADIUS, 7
se
curity ACL-based IPsec, 155
se
curity IPsec, 154
se
curity IPsec on an encryption card, 151
s
ecurity tunnel interface-based IPsec, 173
impleme
nting EAD fast deployment, 108
implemetatio
n
RSH daeomon, 278
importin
g
client public key from public key file, 354
publi
c key from public key file, 272
RSA
key pair, 269, 275
initiating
acce
ss device as authentication initiator
(802.1X), 81
authenti
cation (802.1X), 81
client a
s authentication initiator (802.1X), 81
se
curity 802.1X authentication, 81
initiator
address po
ol for assigning addresses to
initiators, 222
injecting
se
curity IPsec RRI, 153
se
curity IPsec RRI configuration, 171, 196
interface
config
uring packet filtering, 340
Internet
security SSL configuration, 384, 385
Internet Key Exchang
e. See IKE
intrusi
on protection
blockmac mode, 133
disa
bleport mode, 133
disa
bleport-temporarily mode, 133
port se
curity feature, 125
IP
EAD free IP
, 108
se
curity. Use IPsec
se
curity ARP unresolvable IP attack
protection, 400
se
curity URPF configuration, 451
IP
address
specifying outgoing portal packet source IP
address, 305
IP
addressing
ARP packet source MAC consistency check, 403
AR
P source MAC-based attack detection
configuration, 401, 402
se
curity AAA HWTACACS outgoing packet
source IP address, 41
se
curity AAA RADIUS outgoing packet source IP
address, 33
s
ecurity AAA RADIUS security policy server IP
address configuration, 35
s
ecurity SSH SFTP client source IP
address/interface, 359
se
curity SSH Stelnet client source IP
address, 356
IP
source guard
attack detection and protection, 4
config
uration, 405, 406
displ
aying, 409
dynamic bi
nding entry, 406
IPv4. See IPv4 source guard
maintaining, 409
static bin
ding entry, 405
trouble
shooting IP source guard cannot be
enabled (for port), 412
trouble
shooting static IP source guard binding
entries cannot be configured (for port), 412
IPs
ec
ACL configuration, 156
ACL
de-encapsulated packet check, 168
ACL
IPsec anti-replay configuration, 168
ACL
rule keywords, 156
ACL-ba
sed implementation, 155
address po
ol for assigning addresses to
initiators, 222
authenti
cation algorithms, 150
bindin
g policy, policy group, profile to encryption
card, 166
config
uration, 149, 179

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English